this is the checkout api route